Vulnerability in Hewlett Packard Enterprise (HPE) HPE Aruba Networking Edgeconnect Sd-Wan Gateway
CVE-2025-37125
A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS). Successful exploitation could allow an attacker to bypass firewall protections, potentially leading to unauthorized traffic being handled improperly
EPSS: 0.004 (28.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Hewlett Packard Enterprise (Hpe) Hpe Aruba Networking Edgeconnect Sd-wan Gateway — versions 9.5.0.0, 9.4.0.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-37125?
- CVE-2025-37125 is a high-severity vulnerability in Hewlett Packard Enterprise (HPE) HPE Aruba Networking Edgeconnect Sd-Wan Gateway, classified under Improper Access Control. CVSS score: 7.5/10. Published 2025-09-16.
- How severe is CVE-2025-37125?
- High severity. CVSS v3 base score is 7.5 out of 10.